Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: MCM5GFxgCdh6f8hX12H5ZkdD/4WlrRcsXMHTgtq1VZc=
Subject key identifier: 28:9A:DE:A2:57:10:DC:42:79:3B:F8:3D:54:A3:91:98:53:A0:38:D1
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 0198D73ADB306BBCF0BEAF7CACA717B43A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0BB7
Signing time: Sat 23 Aug 2025 14:00:15 +0000
Manifest this update: Sat 23 Aug 2025 14:00:15 +0000
Manifest next update: Sun 24 Aug 2025 14:00:15 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: O4ZcP1odShKDkH7cfGhLAccPyi/fON/+3G/U/f40QeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:db:30:6b:bc:f0:be:af:7c:ac:a7:17:b4:3a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Aug 23 14:00:15 2025 GMT
Not After : Aug 24 14:00:15 2025 GMT
Subject: CN=289adea25710dc42793bf83d54a3919853a038d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:84:31:0b:a8:38:65:3c:df:3f:4f:62:5d:
a5:3a:4a:db:c2:40:26:26:14:d2:db:b6:65:f2:d3:
3b:66:77:3e:16:37:7b:96:8a:9f:2b:8e:4c:29:ba:
ad:7f:ab:51:39:2e:5e:f1:1c:4f:fb:30:00:2d:7b:
e7:62:3b:2e:cf:78:0c:b1:b3:81:d0:1b:14:b3:ee:
28:a8:45:af:b5:e8:e4:f7:3f:fc:b1:19:2d:75:6b:
e8:7f:17:5f:3a:71:0f:5c:72:e4:b8:12:c8:5c:e0:
7e:0f:86:fb:0f:a3:97:80:f1:a3:a9:63:6a:ee:3b:
c6:69:c1:46:e1:51:02:10:21:0c:63:01:64:99:29:
be:df:9c:6f:cb:fa:f4:4f:2c:46:84:53:38:09:64:
c9:4f:61:46:ef:54:cc:0f:c6:eb:1d:f4:12:6d:2f:
16:2f:13:25:94:fe:8f:90:fd:77:5d:da:ec:8c:c2:
7b:e6:f8:9b:99:f7:34:33:b1:75:06:d5:28:ca:20:
bb:1d:07:b5:3d:f9:29:6a:a8:96:8d:a4:89:d5:2f:
9f:41:20:51:94:e2:09:43:2a:39:17:a1:9d:6c:45:
82:dc:aa:8f:04:05:de:4c:9e:a8:0a:80:08:b5:2c:
95:1c:d9:a9:49:a3:8a:d0:2d:17:06:e1:57:63:62:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9A:DE:A2:57:10:DC:42:79:3B:F8:3D:54:A3:91:98:53:A0:38:D1
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:70:ac:69:01:74:b3:eb:e8:a0:9b:52:0e:63:c5:31:1e:32:
88:74:2e:1c:19:71:b8:48:71:eb:12:03:8b:74:08:42:e2:0a:
7f:aa:e0:8f:c0:00:74:59:37:25:75:bf:f2:d1:95:16:ab:ad:
41:1b:2f:23:1f:ae:35:91:7f:d5:9a:d1:b9:db:58:7f:c8:60:
7b:76:1d:e9:b2:af:53:73:f6:65:cd:98:6c:21:5e:2c:06:6e:
9a:b6:24:a5:a1:03:7b:bc:eb:6f:82:5c:48:6a:43:72:8c:ad:
4a:26:9d:29:2b:63:bd:f1:80:97:76:67:a9:fc:5c:b6:f1:ef:
06:1c:d9:e4:11:ec:ce:38:40:7a:67:61:7e:1e:fb:a5:da:c7:
fa:29:80:fc:97:ef:60:1d:e4:9c:65:11:bc:68:91:c6:86:2a:
2f:30:c5:07:8a:85:2e:20:81:26:62:2c:14:4d:57:f3:e7:76:
ee:54:81:a5:db:0d:11:d0:0f:b6:22:fa:de:1e:c0:5c:b4:be:
f8:25:c3:ac:ea:dc:b6:fd:c0:13:19:f7:13:90:59:f3:08:8d:
55:94:3c:e4:02:0c:21:58:6d:b3:fb:9e:2a:1b:b8:53:36:ad:
e8:83:ec:b4:ba:82:48:c2:6f:75:65:ba:77:42:87:01:21:75:
54:46:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:23 2025 by rpki-client